Legal Protection of Personal Data on E-Commerce Platforms

Abstract

In the 21st century, rapid technological advancements and the outbreak of digital commerce have revolutionized the way personal data is collected, processed, and utilized. As online transactions become deeply inserted in everyday life, concerns over data privacy and security have grown significantly, prompting governments worldwide to strengthen legal protections. Global frameworks such as the European Union’s General Data Protection Regulation (GDPR) and the Organization for Economic Co-operation and Development (OECD) guidelines have established strict safeguards to protect consumer data, ensuring greater transparency, accountability, and individual control over personal information. However, Uzbekistan is still in the process of developing a comprehensive legal framework that aligns with these international standards. This study critically examines Uzbekistan’s Law on Personal Data, assessing its scope, enforcement mechanisms, and alignment with global best practices. While the law lays a foundation for data protection, it lacks the necessary regulatory depth to effectively address modern challenges. Key issues include weak enforcement structures, insufficient oversight of data-handling practices, and limited public awareness of data privacy rights. Furthermore, the absence of clear and enforceable policies on cross-border data transfers leaves consumer data vulnerable to misuse by foreign entities, creating additional legal uncertainties. To bridge these gaps, this research proposes a set of legal and policy recommendations aimed at strengthening Uzbekistan’s data protection framework. These include enhancing data security policies, implementing stricter compliance requirements for businesses, increasing transparency in data processing activities, and aligning national laws with internationally recognized standards such as the GDPR. Additionally, the study emphasizes the importance of public education on digital rights and the need for stronger institutional oversight to ensure accountability. By addressing these challenges, Uzbekistan can create a more secure and privacy-conscious digital environment, fostering trust between consumers, businesses, and regulatory authorities.